Added a PolicyCertVerifier that uses the trust anchors from the ONC policies.

chrome/common/chrome_switches.h

Index: chrome/common/chrome_switches.h
diff --git a/chrome/common/chrome_switches.h b/chrome/common/chrome_switches.h
index 312d3802106e9a10ed7e70d8efac78a64a983648..09cc01d0a823a5941947b46132b4f05e7419ae0f 100644
--- a/chrome/common/chrome_switches.h
+++ b/chrome/common/chrome_switches.h
@@ -416,6 +416,7 @@ extern const char kDisableAppMode[];
 extern const char kDisableBootAnimation[];
 extern const char kDisableChromeCaptivePortalDetector[];
 extern const char kDisableDrive[];
+extern const char kDisableLocalAccounts[];
 extern const char kDisableLoginAnimations[];
 extern const char kDisableOobeAnimation[];
 extern const char kEnableBackgroundLoader[];
@@ -426,9 +427,9 @@ extern const char kEnableDrivePrefetch[];
 extern const char kEnableTouchpadThreeFingerClick[];
 extern const char kEnableTouchpadThreeFingerSwipe[];
 extern const char kEnableKioskMode[];
-extern const char kDisableLocalAccounts[];
 extern const char kEnableRequestTabletSite[];
 extern const char kEnableStaticIPConfig[];
+extern const char kEnableWebTrustCerts[];
 extern const char kFirstBoot[];
 extern const char kForceLoginManagerInTests[];
 extern const char kHasChromeOSKeyboard[];